{"id":112738,"date":"2018-11-02T15:39:37","date_gmt":"2018-11-02T14:39:37","guid":{"rendered":"http:\/\/sftarticles.wpenginepowered.com\/en\/?p=112738"},"modified":"2025-07-01T22:48:32","modified_gmt":"2025-07-02T05:48:32","slug":"how-secure-is-the-google-home-hub","status":"publish","type":"post","link":"https:\/\/cms-articles.softonic.io\/en\/how-secure-is-the-google-home-hub\/","title":{"rendered":"How secure is the Google Home Hub?"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-large wp-image-112755\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2018\/10\/Home-Hub-header-1024x576.jpg\" alt=\"Google Home Hub security update\" width=\"840\" height=\"473\" srcset=\"https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2018\/10\/Home-Hub-header-1024x576.jpg 1024w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2018\/10\/Home-Hub-header-300x169.jpg 300w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2018\/10\/Home-Hub-header-768x433.jpg 768w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2018\/10\/Home-Hub-header-800x450.jpg 800w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2018\/10\/Home-Hub-header-664x374.jpg 664w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2018\/10\/Home-Hub-header-238x134.jpg 238w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2018\/10\/Home-Hub-header-436x246.jpg 436w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2018\/10\/Home-Hub-header-370x208.jpg 370w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2018\/10\/Home-Hub-header-304x170.jpg 304w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2018\/10\/Home-Hub-header-1200x675.jpg 1200w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2018\/10\/Home-Hub-header.jpg 1280w\" sizes=\"auto, (max-width: 840px) 100vw, 840px\" \/><\/p>\n<p>The Home Hub is Google\u2019s first smart speaker to come with a screen. It works seamlessly with Google\u2019s other products, which means it has some <a href=\"http:\/\/en.softonic.com\/articles\/google-photos-how-to-use-the-cool-new-live-albums-feature\/\" target=\"_blank\" rel=\"noopener noreferrer\">very interesting features<\/a>. This has impressed almost everybody who has had a chance to play around with it and the Home Hub has subsequently been getting rave reviews across the internet. One person who hasn\u2019t been impressed, however, is security advocate Jerry Gamblin. In a <a href=\"https:\/\/jerrygamblin.com\/2018\/10\/29\/google-home-insecurity\/\" target=\"_blank\" rel=\"noopener noreferrer\">blog post<\/a>, Gamblin has raised a rather serious security issue with the Google Home Hub so we thought we\u2019d take a look at how secure Google\u2019s latest product really is.<\/p>\n<h2>Is the Google Home Hub a secure product?<\/h2>\n<p>Surprisingly, the Google Home Hub doesn\u2019t run on Android. Instead, the Home Hub runs on a version of the Google Cast software the company developed for use with its <a href=\"https:\/\/en.softonic.com\/articles\/the-best-apps-for-chromecast\/\">Chromecast<\/a> products. According to Gamblin, this decision has led to a product that is <strong>\u201cbeyond dismal\u201d at protecting user privacy and that is vulnerable to third-parties taking \u201cnear full remote unauthenticated control.\u201d<\/strong><\/p>\n<blockquote class=\"twitter-tweet\" data-lang=\"en\">\n<p dir=\"ltr\" lang=\"en\">I am not an IOT security expert, but I am pretty sure an unauthenticated curl statement should not be able to reboot the <a href=\"https:\/\/twitter.com\/madebygoogle?ref_src=twsrc%5Etfw\">@madebygoogle<\/a> home hub. <a href=\"https:\/\/t.co\/gCWFm5Ofyb\">pic.twitter.com\/gCWFm5Ofyb<\/a><\/p>\n<p>\u2014 Jerry Gamblin (@JGamblin) <a href=\"https:\/\/twitter.com\/JGamblin\/status\/1056309872659185665?ref_src=twsrc%5Etfw\">October 27, 2018<\/a><\/p><\/blockquote>\n<p>In Gamblin\u2019s very technical blog post he showed that he was able to reboot the device remotely, delete the saved Wi-Fi networks, and disable all notifications. If done correctly, he believes these vulnerabilities could be used to commandeer the device, turning it into a<strong> potential listening device and putting all user information at great risk.<\/strong> Gamblin\u2019s research also discovered that Google has known about these vulnerabilities for a long time and still not acted on them. This last point is why he, as an independent security researcher, decided to go public with his discoveries rather than contact Google about the potential holes in their security.<\/p>\n<!-- Shortcode [playwire] does not match the conditions -->\n<p>Since Gamblin released all of his findings, many news outlets picked up the story that Google\u2019s Home hub is an unsecured device. This has caused Google to react quickly and refute the claims. In a statement to <a href=\"https:\/\/www.androidauthority.com\/google-home-hub-security-920291\/\" target=\"_blank\" rel=\"noopener noreferrer\">Android Authority<\/a>, Google said:<\/p>\n<p>\u201cAll Google Home devices are designed with user security and privacy top of mind and use a hardware-protected boot mechanism to ensure that only Google-authenticated code is used on the device. In addition, any communication carrying user information is authenticated and encrypted. A recent claim about security on Google Home Hub is inaccurate. The APIs mentioned in this claim are used by mobile apps to configure the device and are only accessible when those apps and the Google Home device are on the same Wi-Fi network. Despite what\u2019s been claimed, there is no evidence that user information is at risk.\u201d<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-112899\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2018\/11\/google-home-hub.jpg\" alt=\"\" width=\"700\" height=\"489\" srcset=\"https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2018\/11\/google-home-hub.jpg 700w, https:\/\/articles-img.sftcdn.net\/auto-mapping-folder\/sites\/3\/2018\/11\/google-home-hub-300x210.jpg 300w\" sizes=\"auto, (max-width: 700px) 100vw, 700px\" \/><\/p>\n<p>Google is saying that what Gamblin has discovered is true, but that he has missed one small point. As the Home Hub is supposed to be a control and display unit it needs to communicate with other smart objects connected to the Wi-Fi network. Gamblin was able to execute several worrying commands but only because his computer had been authorized to work on the same Wi-Fi network as his Google Home Hub. A hacker would not be able to execute the same commands unless he already had access to the home Wi-Fi network. This would explain why Google hasn&#8217;t acted on the issues Gamblin highlighted.<\/p>\n<div class=\"sc-card-starred-link\">\r\n  <div class=\"sc-card-starred-link__body\">\r\n    <div class=\"sc-card-starred-link__row clearfix\">\r\n      <div class=\"sc-card-starred-link__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-starred-link__img\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/04\/wifi-1024x768.jpg\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-starred-link__col-title\">\r\n        <p class=\"sc-card-starred-link__title\">How Do I Know if Someone Is Stealing my Wi-Fi Connection?<\/p>\r\n        <a class=\"sc-card-starred-link__button\" href=\"https:\/\/en.softonic.com\/articles\/how-do-i-know-if-someone-is-stealing-my-wi-fi-connection-nzn\" target=\"_blank\" rel=\"noopener noreferrer sponsored\">Find out now<\/a>\r\n      <\/div>\r\n    <\/div>\r\n    <a class=\"sc-card-starred-link__link\" href=\"https:\/\/en.softonic.com\/articles\/how-do-i-know-if-someone-is-stealing-my-wi-fi-connection-nzn\" target=\"_blank\" rel=\"noopener noreferrer sponsored\"><\/a>\r\n  <\/div>\r\n<\/div>\n<p>In answer to the original question then, <strong>the Google Home Hub is as secure as your home Wi-Fi network.<\/strong> For tips on how to boost your home Wi-Fi network security, check out our guide below.<\/p>\n<div class=\"sc-card-starred-link\">\r\n  <div class=\"sc-card-starred-link__body\">\r\n    <div class=\"sc-card-starred-link__row clearfix\">\r\n      <div class=\"sc-card-starred-link__col-logo\">\r\n        <img decoding=\"async\" class=\"sc-card-starred-link__img\" src=\"https:\/\/articles-img.sftcdn.net\/sft\/articles\/auto-mapping-folder\/sites\/3\/2017\/11\/WiFi-Security-2-1024x576.jpg\" width=\"100px\" height=\"100px\">\r\n      <\/div>\r\n      <div class=\"sc-card-starred-link__col-title\">\r\n        <p class=\"sc-card-starred-link__title\">How to secure your Wi-Fi network<\/p>\r\n        <a class=\"sc-card-starred-link__button\" href=\"https:\/\/en.softonic.com\/articles\/how-to-secure-your-wi-fi-network-part-1\" target=\"_blank\" rel=\"noopener noreferrer sponsored\">Find out now<\/a>\r\n      <\/div>\r\n    <\/div>\r\n    <a class=\"sc-card-starred-link__link\" href=\"https:\/\/en.softonic.com\/articles\/how-to-secure-your-wi-fi-network-part-1\" target=\"_blank\" rel=\"noopener noreferrer sponsored\"><\/a>\r\n  <\/div>\r\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>Is the Google Home Hub a secure product?<\/p>\n","protected":false},"author":9073,"featured_media":112755,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","wpcf-pageviews":0},"categories":[1015],"tags":[1401,1082,2340,1068,1027],"usertag":[839],"vertical":[],"content-category":[],"class_list":["post-112738","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-news","tag-ai","tag-android","tag-app-subdomain-redirectiongoogle","tag-google","tag-security","usertag-vpn"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/112738","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/users\/9073"}],"replies":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/comments?post=112738"}],"version-history":[{"count":1,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/112738\/revisions"}],"predecessor-version":[{"id":327110,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/posts\/112738\/revisions\/327110"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media\/112755"}],"wp:attachment":[{"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/media?parent=112738"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/categories?post=112738"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/tags?post=112738"},{"taxonomy":"usertag","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/usertag?post=112738"},{"taxonomy":"vertical","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/vertical?post=112738"},{"taxonomy":"content-category","embeddable":true,"href":"https:\/\/cms-articles.softonic.io\/en\/wp-json\/wp\/v2\/content-category?post=112738"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}